How to Block Email Trackers

Most of the newsletters and marketing emails in your inbox are watching you read them. A single invisible pixel tells the sender the moment you open a message, roughly where you were, and what device you used — and you never agreed to any of it. The good news is that you can block email trackers with a handful of changes that take minutes, not a computer-science degree. This guide explains exactly what these trackers are, how they quietly work, what they can and cannot see, and the practical layers — from a single client setting to a pixel-stripping alias — that shut them down. By the end you will know how to block email trackers on your laptop and your phone, and where the honest limits of that protection are.

What email trackers are

An email tracker is a small piece of content embedded in a message whose only job is to report back to the sender when, where, and how you interacted with it. The most common form is the tracking pixel — a web beacon that is usually a 1×1 transparent image, invisible against any background. When your email app loads that image, it makes a request to the sender’s server, and that request is the tracking event. Nothing pops up, nothing asks permission — the mere act of the image loading is the signal.

Pixels are not the only kind. There are three families of email tracker worth knowing about, because you block each one slightly differently:

• Open-tracking pixels. The invisible image described above. It fires the instant the message is rendered, telling the sender you opened it. This is by far the most widespread tracker and the one most of this guide is about.
• Click-tracking links. Instead of linking straight to a destination, the email routes every link through the sender’s own redirect server, tagged with an identifier. You click, their server logs it, then bounces you to the real page. Those UTM parameters and long random strings in a link are the visible tail of this.
• Read receipts and beacons in attachments. Some senders embed remote content in attachments or use formal read-receipt requests. These are rarer for marketing mail but common in sales-outreach and “mail-merge” tools.

The reason this matters is scale. This is not an occasional thing a few shady senders do — independent studies have found tracking pixels in a large share of commercial mail, and the tools that plant them are sold as standard features of every mainstream marketing platform. If you get newsletters, receipts, or promotional email, you are almost certainly being tracked right now. Learning to block email trackers is less about defeating a rare attack and more about switching off surveillance that has quietly become the default.

How email tracking works

The mechanism is worth understanding, because once you see it, the way to block it becomes obvious. Email tracking piggybacks on a completely normal feature: the ability for an email to display images that live on a remote server rather than being bundled into the message itself.

Here is the sequence. A sender composes an email and includes an image tag pointing at a URL on their server — something like track.example.com/o.gif?id=YOUR-UNIQUE-ID. That ID is unique to you and that specific send. When your email client displays the message, it fetches every remote image, including that one. The fetch lands on the sender’s server carrying your unique ID, the timestamp, your IP address, and your device’s user-agent string. The server logs all of it and returns a transparent pixel your eye never registers. From the sender’s dashboard, that single request becomes a row: “this recipient opened at 9:04am, on an iPhone, from this city.”

Because the whole thing depends on your client automatically loading a remote image, the single most effective way to block email trackers is to stop that automatic load. Every technique in this guide is a variation on that one idea — either your client refuses to fetch remote images, or something in the middle fetches them in a way that reveals nothing about you. The click-tracking links are a little different: those only fire when you actually click, and the way to neutralise them is to strip the tracking parameters or avoid the redirect, which good privacy tools now do automatically.

What trackers can see about you

It is easy to wave this away as harmless marketing analytics, so it is worth being specific about what a single open actually leaks. A tracking pixel firing hands the sender a surprising amount:

• That you opened it, and exactly when. Down to the second. Open it twice and they see both. For a sales tool, “opened three times in ten minutes” is read as buying interest.
• Where you were. Your IP address maps to an approximate location — usually your city, sometimes closer. Open a message at home and again at work and you have revealed two locations and a routine.
• Your device and client. The user-agent reveals whether you are on an iPhone, an Android, a Mac, or Outlook on Windows, and often the OS version.
• Your behaviour over time. Because the ID is tied to you, every open is stitched into a timeline: which subject lines make you open, what time of day you read, how quickly you respond. That profile is valuable, and it is often shared or sold.

None of that required your consent, and none of it showed up on screen. This is exactly the kind of passive profiling that email privacy advocates warn about, and it is the reason people who would never install a spyware app are unknowingly running the email equivalent every day. Deciding to block email trackers is really deciding that when you read your own mail is nobody’s business but yours.

To see why that profile is worth so much, picture how a single sender uses it. A retailer sends a sale email at 8am. Their dashboard shows you opened it at 8:03, again at lunchtime, and a third time that evening — never clicked. To a marketer that pattern reads as “interested but hesitating,” and it triggers a follow-up discount aimed precisely at you, at the time of day you tend to open. Multiply that across every shop, newsletter, and app you have ever handed your address to, and the picture is not one company knowing a little — it is dozens of them each maintaining a running behavioural file, keyed to the same email address, that you never see and cannot correct. Blocking the pixel is how you stop feeding those files.

How to block email trackers in your inbox

Start with the change that stops the majority of trackers cold: tell your email client not to load remote images automatically. No pixel can fire if the image never loads. Every major client supports this, and turning it on means images only appear when you deliberately choose to show them — at which point you have decided, rather than the sender deciding for you.

• Gmail (web). Settings → See all settings → General → Images → choose “Ask before displaying external images.” Gmail also routes images through its own proxy server, which hides your IP but does not stop the open being recorded, so this setting still matters.
• Apple Mail (Mac and iOS). Turn on “Protect Mail Activity” (Settings → Mail → Privacy Protection), or if you prefer full control, disable “Load Remote Images.” Protect Mail Activity routes image loads through Apple and pre-fetches them, so the sender cannot tie an open to you.
• Outlook. File → Options → Trust Center → Trust Center Settings → Automatic Download → tick “Don’t download pictures automatically.” On outlook.com the equivalent lives under Settings → Mail → Junk email and message handling.
• Thunderbird and others. Look for a “remote content” or “external images” setting — nearly every client has one, usually defaulting to block for junk and allow for known senders.

This single setting is the foundation. If you do nothing else, blocking remote images will block email trackers in the vast majority of the mail you receive. The trade-off is that legitimate images — a newsletter’s header, a receipt’s logo — also stay hidden until you click “show images,” but that is a small price, and after a week you stop noticing.

For click-tracking links, the fix is different. A dedicated tracker blocker or a privacy-focused browser extension will strip UTM parameters and unwrap redirect links so you land on the real page without pinging the sender’s logger. Some email clients and privacy tools now do this automatically. If you want to see who is tracking you rather than silently blocking it, tools like the well-known open-source tracker blockers will flag and neutralise pixels while showing you a count — a useful way to grasp just how routine this has become.

How an alias helps block email trackers

Client settings protect one app on one device. The moment you read the same account in a different client — a webmail login on a borrowed laptop, a phone app that ignores your desktop rules — the protection is gone. This is where routing your mail through a forwarding alias changes the picture, because the protection then lives at the mail layer, before the message ever reaches any of your devices.

A forwarding alias sits between the sender and your real inbox. Instead of giving a newsletter your actual address, you give it an alias; mail to that alias is received by the forwarding service, which can inspect and clean the message before passing it on. A tracker-aware alias service strips known tracking pixels and neutralises redirect links at that relay point, so what lands in your inbox is already clean — regardless of which client or device you eventually open it on. You can read more about how this routing works in our guide to how email aliases work.

There is a second, quieter benefit that compounds the first. Because each service gets its own alias, a tracker can never correlate your activity across senders using your email address as the key — the thing that ties your opens together into a profile is different for every company. And if a particular sender turns out to be an aggressive tracker or sells your address on, you switch that one alias off and the mail — trackers and all — simply stops arriving. That combination of stripping pixels and compartmentalising senders is why a good private email alias is one of the strongest single moves you can make to block email trackers across your whole inbox at once, not just in one app.

This is also the layer that dedicated masking products compete on. Our DuckDuckGo Email Protection review looks at one free option that strips trackers at the relay, and the same principle underpins any forwarding service that advertises tracker removal. The important idea is architectural: protection at the mail layer travels with the message, while protection in a client stays behind on that device.

Blocking trackers on your phone

Phones are where tracking quietly wins, because most people read email on mobile and mobile clients historically loaded images by default. Closing that gap matters as much as the desktop settings, and often more, since it is where you open mail first thing in the morning.

• iPhone Mail. Settings → Apps → Mail → Privacy Protection → turn on “Protect Mail Activity.” This both hides your IP and pre-loads images in a way that decouples the load from your actual open, which defeats standard pixels.
• Gmail app. In the app, Settings → your account → Images → “Ask before displaying external images.” Set this on every account the app manages.
• Outlook mobile. Settings → the block/download-images option for external content, and turn it off.
• Third-party privacy apps. Some mail apps are built around tracker blocking and will strip pixels for any account you add. If you already route mail through a tracker-stripping alias, the cleaning has happened upstream and every phone app benefits automatically.

The pattern across every device is the same one from the start of this guide: a pixel can only report on you if something on your side loads it. Whether that “something” is a desktop client, a phone app, or a webmail login, blocking the automatic load — or having an alias strip the pixel before it arrives — is what shuts the tracker down. Doing it per-device is fine; doing it once at the mail layer is why the alias approach scales better as you add devices.

The limits of blocking email trackers

Honesty matters here, because privacy advice that oversells itself leaves people worse protected than they think. Blocking remote images and routing mail through a clean alias defeats the overwhelming majority of trackers, but a few things sit outside its reach, and it is better to know where the edges are:

• You still leak if you click. Image-blocking stops open tracking, but if you click a tracked link, that click is logged whether or not images loaded. Stripping link parameters — or simply being deliberate about which links you click — is the companion habit.
• “Show images” is a conscious open. The instant you choose to display a message’s images, any pixel in it fires. That is fine — you decided — but it is not invisible protection, it is you taking the wheel.
• Some senders infer opens indirectly. A sender can still see that mail was delivered and, over time, guess at engagement from clicks and replies. Blocking pixels removes the precise open signal, not every possible inference.
• Provider proxies hide your IP, not the open. Gmail’s image proxy and Apple’s pre-fetch protect your location, but a message can still be registered as loaded. For a true block you want the pixel stripped or never fetched, which is exactly what a tracker-aware alias does.

It is also worth being clear about what you are not giving up. Blocking trackers does not mean losing the emails themselves, breaking newsletters, or reading everything as grey text. The message still arrives; you still read it; the sender simply loses the invisible confirmation of exactly when and where. Nor does it require constant vigilance — once the client setting is on and your mail flows through a clean alias, the protection is passive and permanent. You are not signing up for a chore, you are changing a default once. That is the whole appeal of learning to block email trackers this way: set it up, then forget it.

None of this makes the effort pointless — quite the opposite. It means you should think in layers rather than looking for a single magic switch. Turning off remote images removes most open tracking; an alias strips what is left and covers every device; being thoughtful about clicks closes the last gap. Stack those and you have blocked email trackers about as thoroughly as a normal person realistically can, which is very thoroughly indeed.

A layered setup to block email trackers

Putting it all together, here is the setup we would recommend to anyone who wants strong, low-maintenance protection without turning email into a chore. Each layer catches what the one before it misses, and none of them takes long to put in place:

Read top to bottom, that is a defence in depth: a client setting handles the common case, an alias makes the protection portable and adds a kill switch, per-service addressing breaks the profile, and link-stripping closes the click gap. You do not have to adopt all five at once. Start by blocking remote images today, add a forwarding alias for your newsletters and signups this week, and you will already have blocked the trackers behind almost everything in your inbox.

If you want to begin with the alias layer — the one that protects every device at once — you can create your first addresses in a couple of minutes with an email alias generator, or read how the whole approach fits together on our email alias service page. Newsletters are the highest-value place to start, since they are where tracking pixels are thickest; our guide to using an email alias for newsletters walks through exactly that. These are permanent forwarding addresses you control — not disposable inboxes that expire on you.

Final thoughts

Email tracking became the default so quietly that most people have never consciously agreed to it, and never realised how much a single opened newsletter gives away. The reassuring part is how little it takes to opt out. You do not need to abandon email or read everything in plain text; you need to stop your apps from loading remote images without asking, and ideally route your mail through an alias that strips the trackers before they reach you.

Do those two things and you will block email trackers on nearly everything you receive, on every device, with a kill switch for any sender that abuses your address. It is one of the rare privacy upgrades that costs almost nothing, works immediately, and keeps working. Start with 10 aliases free on EmailAlias.io, point your noisiest newsletters at them, and take back the simple fact of when — and whether — you read your own mail. For the wider picture on what your address exposes, see whether you should use your real email online at all.

Frequently asked questions